Comment by LorenDB

Or listening to the number of keystrokes (although you can add random characters and then backspace to help mitigate this).